Digital Garden

Search Ctrl K

Digital Garden

Search Ctrl K

010 Cybersecurity MOC

011 🛡️ Blue Team & SOC Operations MOC

012 ⚔️ Red Team & Offensive Security MOC

013 🌐 Web Application Security MOC

014 🦠 Malware Analysis & Forensics MOC

015 🔐 Cryptography & Identity MOC

017 🤖 AI & Emerging Tech MOC

018 🎓 Learning & Projects MOC

019 🎤 Interview Prep MOC

020 Infrastructure & Networking MOC

022 Virtualization & Cloud

090 Cheatsheets MOC

Active Reconnaissance

Alert Reporting

Alerting and Detection Strategies Framework

Artificial Intelligence

Asset Inventory

Atomic Red Team

Attack Residues

Attack Signatures

Attribute-Based Access Control (ABAC)

Audit Logon Events

Authentication Failures

Authorization Bypass

Banner Grabbing

Broken Access Control

Buffer Overflow

Business Email Compromise

C2 Detection - Command & Carol

CALMS Framework

Certificate Revocation Lists (CRLs)

Chain of Custody

Chain-of-thought (CoT)

Command and Control (C2)

Command Injection

Cross-site request forgery (CSRF)

Cross-Site Scripting (XSS)

Cryptographic Failure

Cyber Kill Chain

Data Loss Prevention (DLP)

Detection Engineering

Detection Maturity Level Model

Developer Velocity

Dictionary Attacks

Domain Generation Algorithm (DGA)

Domain Information Groper (dig)

Dynamic Analysis

Endpoint detection and response (EDR)

Environment-based detection

File Timestamps (mtime, ctime, atime)

Governance, Risk and Compliance (GRC)

Hardware Security Module (HSM)

HTA (HTML Application)

Identification, Authentication, Authorization, and Accountability (IAAA)

Incident Response

Indicator Detection

Insecure Design

Insecure Direct Object Reference (IDOR)

Interactive logon - Display user info when locked

Intrusion Prevention System (IPS)

John the Ripper

Key Backup and Recovery

Key Destruction

Key Distribution

Key Management Lifecycle (KML)

Large Language Models (LLMS)

Lateral Movement

Living off the Land (LOLBAS)

Logging & Alerting Failures

Malware Analysis - Malhare.exe

Malware Analysis

Metasploit Console

Metasploit Framework

Metasploit Modules

Modbus - Claus for Concern

Moniker Link (CVE-2024-21413)

Multi-Factor Authentication (MFA)

Open Source Intelligence (OSINT)

Parameterized Queries

Passive Reconnaissance

Password Cracking

Penetration Testing Report

Persistence (Cyber Security)

PowerShell Script Block Logging

Privilege Escalation

Process Injection

Public Key Infrastructure

Pyramid of Pain

ReAct Prompting

Regression Testing

Role-Based Access Control (RBAC)

Search Engine Optimization (SEO)

Secure by Design

Security Information and Event Management system (SIEM)

Security Misconfigurations

Security Operations Center (SOC)

Server Side Template Injection (SSTI)

Server-Side Request Forgery (SSRF)

Social Engineering

Software Development Lifecycle (SDLC)

Software Restriction Policies

SSH authorized_keys

Static Analysis

SUID and SGID Permissions

Sysmon Event ID 11 - File Create

Sysmon Event IDs

Tabletop Exercise

TheHive Project

THM - Intro to Detection Engineering

THM - Malware Introductory

THM - Splunk Basics - Did you SIEM

Threat Behavior detections

Threat Emulation

Threat Intelligence Feeds

Threat-based detection

TIBER-EU Framework

TTPs (Tactics, Techniques, Procedures)

Unified Kill Change

User-Agent Spoofing

View Page Source

Web Application Firewalls (WAFS)

Windows Event ID 1102

Windows Event ID 4698

Windows Event Logs

Zero-Day Exploit

Select a result to preview

Enter to select

to navigate

ESC to close

Pyramid of Pain

##cybersecurity/red-team/methodology

This framework makes it difficult for an adversary to change their approach when detected.

Connected Pages

Depth

Pages mentioning this page

011 🛡️ Blue Team & SOC Operations MOC

012 ⚔️ Red Team & Offensive Security MOC

Cyber Kill Chain

THM - Intro to Detection Engineering

TTPs (Tactics, Techniques, Procedures)

Threat Emulation

Threat Intelligence Feeds

Threat-based detection